Senior Principal Product Security Engineer

Northrop Grumman

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Dulles, VA
Salary: $125,300–$187,900 / yr
Employment: Full-time
Posted: 12 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $200k

This role $157k

$109k $279k

below market most similar roles pay here above market

This role pays less than 86% of similar roles. Most pay $174,600–$225,500 — the blue band above. At the midpoint, this role pays about $157k versus about $200k for comparable roles.

Based on 240 similar postings.

Employer

About Northrop Grumman

Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense

Northrop Grumman currently has 629 open roles on FindRole.

Listed pay typically runs $117,500–$176,300 across 314 roles with salary data.

Most-posted roles

View all roles at Northrop Grumman

At a glance

TL;DR · Senior Principal Product Security Engineer

Role Posting Log in to save

JOB TITLE: Sr. Principal/ Principal Product Security Engineer The Sr. Principal/ Principal Product Security Engineer joins the Product Security Engineering team to support the secure development and authorization of mission-critical spacecraft and flight software. This role involves building and leading product security for space vehicles, including guidance, navigation, and control software, simulation platforms, and embedded systems. You will perform threat modeling, attack surface analysis, secure design and code reviews, and software supply-chain risk management. You will integrate automated security capabilities like SAST, SCA, and SBOM generation into GitLab CI or Jenkins pipelines. Key requirements include proficiency in C/C++, Python, and Go to develop automations and resolve real risks. You will also develop Risk Management Framework artifacts to drive Authorization to Operate for platform IT systems within a complex aerospace engineering environment.

Skills

C/C++ Python Go GitLab CI Jenkins CI/CD RMF SAST SCA SBOM Threat Modeling Embedded Linux RTOS Git Subversion NIST SP 800-53 Vulnerability Management Secure Coding Code Review Secrets Scanning

What you'll do

Conduct security assessments of embedded and mission software, including architecture reviews, code reviews, and vulnerability assessments.
Develop and maintain software threat models, data-flow diagrams, and risk assessments for embedded software and supporting platforms.
Integrate and improve security tooling within CI/CD pipelines, including SAST, SCA, secret scanning, and SBOM generation.
Develop custom security tools and automations using Python, Go, or similar languages to improve engineering velocity.
Triage security findings and collaborate with engineering teams to establish remediation priorities and drive findings to closure.
Manage software supply-chain security by performing dependency risk assessments and reviewing software bill of materials.
Develop and maintain RMF artifacts, such as System Security Plans and Risk Assessment Reports, to obtain an Authorization to Operate.
Advise software development teams on secure coding practices, secure architecture, and embedded system security design.

What we're looking for

Active Top Secret/SCI security clearance is required.
U.S. Citizenship is required.
Level 3 requires 5 years of experience with a Bachelor's, 3 years with a Master's, or 1 year with a PhD.
Level 4 requires 8 years of experience with a Bachelor's, 6 years with a Master's, or 4 years with a PhD.
Proficiency in C or C++ and experience reviewing, developing, or securing embedded software is required.
Experience with Python, Go, or similar languages to develop automations and custom tooling is required.
Experience with real-time operating systems (RTOS), embedded Linux, or comparable embedded platforms is required.
Bachelor's degree.

Save